이 페이지에서

For AI agents: a documentation index is available at /docs/llms.txt. Append .md to any page URL for markdown, or send Accept: text/markdown.

Enterprise-managed auth

이 페이지는 아직 귀하의 언어로 번역되지 않았습니다. 현재 작업 중이므로 곧 다시 확인해 주십시오.

Enterprise-managed auth (EMA), also called Cross App Access (XAA), connects Claude to Amplitude through your identity provider. Claude signs in as the person already signed in to the app and skips the Amplitude consent screen.

Use enterprise-managed auth when your identity provider should decide who can open Claude against Amplitude. Use the standard OAuth connection when each person should approve access in the browser. Use an MCP service account when a bot, CI job, or backend service calls Amplitude with no person signed in.

Claude supports enterprise-managed auth. ChatGPT, Cursor, and other clients still connect with OAuth or an MCP service account.

Prerequisites

  • You can change single sign-on settings for your organization. Amplitude shows Cross App Access on Settings > Content Access > MCP to those admins.
  • Your identity provider issues identity assertions for your members. Amplitude recognizes Okta, Google Workspace, Microsoft Entra ID, Auth0, OneLogin, and Ping Identity. Other OpenID Connect issuers work as a custom provider.

Add an identity provider

  1. In Amplitude, go to Settings > Content Access > MCP.
  2. Under Cross App Access, select Add identity provider.
  3. Enter the Issuer URL. For Okta, use your Okta org URL, such as https://acme.okta.com. Don't use a URL that ends in /oauth2/default.
  4. Enter Signing keys URL (JWKS) if you have one. When you leave this field blank, Amplitude reads the signing keys from the issuer URL.
  5. Select Add.

Members can connect through that provider right away.

Connect Claude

Members connect the Amplitude connector in Claude. After you add a trusted identity provider, Claude skips the Amplitude consent screen and acts as the signed-in person.

You set who can use Claude, and which scopes Claude can request, in the identity provider. Amplitude still applies each person's role. Claude can't read or change anything that person can't do in Amplitude.

The Amplitude connector in Claude's directory uses the United States server, https://mcp.amplitude.com/mcp. If your Amplitude data resides in the European Union, contact your Amplitude account team before you connect.

Remove an identity provider

  1. In Settings > Content Access > MCP, select the provider under Cross App Access.
  2. Select Remove provider, then confirm with Remove.

People can't connect through that provider anymore. Connections already open stop working within a minute.

이 내용이 도움이 되었나요?